# 4.21.19

Created: 2026-06-04 13:38:30 +0000 UTC

Image Digest: `sha256:188f8b0518756bc2e642efd7ff18c001e8a160c60723a3a2f4f85486a45a2101`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:b0d8f5f66aa0b3480b8efb4efd9c58728010e17bb299f53d0ec362ecef9e7eed


## Changes from 4.21.18

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (0 tests)|  |  |  |  |  |   |


### Rebuilt images without code change

* [baremetal-installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:2c345d85ad54ce9c662a2276a9a020524a89d6bea1217553649285b21f51513d`
* [cli](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:98cebfc43b163070c8081dbcc8408157ceb3d3c5ebf1e5f8879d8669aaec0528`
* [cli-artifacts](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:35c765f6df6ce24ca271c97fc72e22c3d959cc73898ed301f9cfc7205f1f7bb8`
* [deployer](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:ce35c15f728015ff60d256fdc15abe3105678f9138d339cef2d9b641e6336d8e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:2d57f6c6869fa4faa7eac4bc8fea4575c8beb0f7c744ebf6c52166aba0843fcb`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:95b5c242233038bd2cdade307d507ae434ee75e665a313509cec6eec1068ba94`
* [hyperkube](https://github.com/openshift/kubernetes) git [eab2218b](https://github.com/openshift/kubernetes/commit/eab2218b931d0c20740d6259df59f242abf32ef7) `sha256:9108c0a4062998ce2fbc71b59d89f21bf772a8f45cab4225b8b33d837e20219e`
* [installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:72374d8958e87c88e633d1be0ecd9bbbf4854fe43e09fa4d7f5fac90b6bf85a9`
* [ironic](https://github.com/openshift/ironic-image) git [6e93d7a0](https://github.com/openshift/ironic-image/commit/6e93d7a042c96f1db6307549d348da8f6f89b06a) `sha256:a531339be7dddb7bf2c3951d8596f481153699638e2452881306a18fb1cbdc9f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:64fc22fc6dbfcf39ca3a0fc8dbe43b85786c5f1fd24c1eee8f73eba7169d0107`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e9019e5f](https://github.com/openshift/machine-os-images/commit/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd) `sha256:1b249c08343eb23e89f61675e459010e779b819167acf073e18eba5c5080b060`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [462c7889](https://github.com/openshift/monitoring-plugin/commit/462c78890ffb636e05d91d41ca718bb3c81da4cf) `sha256:62ffdb4474948589b740f2c9da54aa0b3013d672861e312d7af1e7d321bb761a`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:e524b04d586114067896578249ebd83dc080f2f71d3def796aa52cb1f5cac21a`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:a468700d3f1dc4c2f02984978000e58c3ddafee7408d658dc719d6488b2cfebd`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:d9931944064a9eb9ee7fc9349e792f380cb69910ce725d2ec0403a27bd35880c`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [d586f851](https://github.com/openshift/ovn-kubernetes/commit/d586f851c25d8f7cd04840cda79a0a6a98ea8485) `sha256:ad1dea03a0a988dc42903cbcf6035a1be11320d83c022696d25df175302df71a`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:8edcd67b586862d0482d104a35ffd206528228a54e477bbc18316e5757e25695`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:8be53c51e359c956e2d1575b887cc2867fe9400f0cb0044d806f87bf2d79581c`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:6be4778cf854f51af8423e9f9822ef9e36d569986ba49dfc631161af7d536c63`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:6764b4e297b540d3c96cd491148ec2b51a20c93a031269680bf2620f3460b3cf`
* [tests](https://github.com/openshift/origin) git [c2da98a5](https://github.com/openshift/origin/commit/c2da98a5a8f0e23886ac536fbeb81140e798fb71) `sha256:ae7dcfdfd47119fedbd2f7b0a7a55cb2b252880816d66ef0e45d46553d37f826`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:eadb6de4a7eb560ea23855e0e08b1742fd75ab689d789c6ad476b487709f5584`


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/0b264c7f6c227a2ea4d1392879bce555d087dac0)

* prefill staticip on ove below the sea (#3769) [#3769](https://github.com/openshift-assisted/assisted-installer-ui/pull/3769)
* Custom manifests are broken in local Assisted UI (#3770) [#3770](https://github.com/openshift-assisted/assisted-installer-ui/pull/3770)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/0df91b31e146522a5548f699c13214073ac53045...0b264c7f6c227a2ea4d1392879bce555d087dac0)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/20bb13fab3865444b7a4ae454dd234391c4d7e49)

* [OCPBUGS-85572](https://issues.redhat.com/browse/OCPBUGS-85572): Add init container for Manila node daemonset [#554](https://github.com/openshift/csi-operator/pull/554)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f294954dc029e0ed120243c3188af81df89d9e4...20bb13fab3865444b7a4ae454dd234391c4d7e49)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/154ae10f442b7d40f14492c5973cd3459791d00f)

* [OCPBUGS-81982](https://issues.redhat.com/browse/OCPBUGS-81982): Bump go-jose/go-jose/v4@v4.1.4 [#1027](https://github.com/openshift/cloud-credential-operator/pull/1027)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/693d9f3485b21cf128fa379eabd6787737fa56ad...154ae10f442b7d40f14492c5973cd3459791d00f)


### [cluster-config-api](https://github.com/openshift/api/tree/1d79f30d4668393dc34e9b423ec6904645503c58)

* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Backport GatewayAPIWithoutOLM feature gate as disabled [#2864](https://github.com/openshift/api/pull/2864)
* [Full changelog](https://github.com/openshift/api/compare/b66d75611553df4827e899e5eaa4d6321ed9f44c...1d79f30d4668393dc34e9b423ec6904645503c58)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): gate dual-replica setup and keep retrying [#1620](https://github.com/openshift/cluster-etcd-operator/pull/1620)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10012737e9b23528357c130184ef4d890ae8ea33...898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)

* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#1446](https://github.com/openshift/cluster-ingress-operator/pull/1446)
* [OCPBUGS-86027](https://issues.redhat.com/browse/OCPBUGS-86027): Fix logging for unmanaged controllers [#1448](https://github.com/openshift/cluster-ingress-operator/pull/1448)
* [OCPBUGS-80759](https://issues.redhat.com/browse/OCPBUGS-80759): Authorization bypass due to improper HTTP/2 path validation [#1441](https://github.com/openshift/cluster-ingress-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6c70966cd2011f861843e85efb8bf08c3a938fe1...3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)

* [OCPBUGS-86809](https://issues.redhat.com/browse/OCPBUGS-86809): Requeue PerformanceStatus update when status write fails [#1524](https://github.com/openshift/cluster-node-tuning-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58...d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)


### [console](https://github.com/openshift/console/tree/402882702875b34bb4872c051808a35a67880346)

* [OCPBUGS-85674](https://issues.redhat.com/browse/OCPBUGS-85674): Prevent binary secret data corruption when editing [#16448](https://github.com/openshift/console/pull/16448)
* [OCPBUGS-79459](https://issues.redhat.com/browse/OCPBUGS-79459): CVE-2026-29063 Immutable.js: Improperly Controlled Mod… [#16503](https://github.com/openshift/console/pull/16503)
* [OCPBUGS-86427](https://issues.redhat.com/browse/OCPBUGS-86427): Fix Shipwright detail pages crashing with React error #310 [#16487](https://github.com/openshift/console/pull/16487)
* [OCPBUGS-86314](https://issues.redhat.com/browse/OCPBUGS-86314): Show empty state instead of 403 error for users without projects [#16478](https://github.com/openshift/console/pull/16478)
* [Full changelog](https://github.com/openshift/console/compare/28c6e026e4cc49aa470f755ae01a1acb4cd2935d...402882702875b34bb4872c051808a35a67880346)


### [console-operator](https://github.com/openshift/console-operator/tree/aee1a79b48a86e0feaef8ac72b5ec3c124429859)

* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1096](https://github.com/openshift/console-operator/pull/1096)
* [Full changelog](https://github.com/openshift/console-operator/compare/4393afe88810c9db76fc6da1821787449e666ef4...aee1a79b48a86e0feaef8ac72b5ec3c124429859)


### [hypershift](https://github.com/openshift/hypershift/tree/d345a6af0fb9c22d2058ac98994afbcb41e24f6f)

* [OCPBUGS-86416](https://issues.redhat.com/browse/OCPBUGS-86416): add Konflux pipeline definitions for CPO 4.21 [#8607](https://github.com/openshift/hypershift/pull/8607)
* [OCPBUGS-86477](https://issues.redhat.com/browse/OCPBUGS-86477): [release-4.21] add CP pull-secret watches for in-place propagation [#8583](https://github.com/openshift/hypershift/pull/8583)
* [Full changelog](https://github.com/openshift/hypershift/compare/b5bc1c2f89e9cdbd5d0d1b1374674f5bcd45b76b...d345a6af0fb9c22d2058ac98994afbcb41e24f6f)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0efd2f822814f9965ef6dc14b68f24eebcaca40d)

* Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose [#143](https://github.com/openshift/kube-state-metrics/pull/143)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/ce6f3742ed123b671acd6de4d3605c3a7f644cf8...0efd2f822814f9965ef6dc14b68f24eebcaca40d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)

* [OCPBUGS-86576](https://issues.redhat.com/browse/OCPBUGS-86576): Verify extension packages are installed [#6090](https://github.com/openshift/machine-config-operator/pull/6090)
* [OCPBUGS-84481](https://issues.redhat.com/browse/OCPBUGS-84481): MCS fallback to latest v3 [#5883](https://github.com/openshift/machine-config-operator/pull/5883)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5aabf7ccb1f54f0c889a87b1670827f9b2d23461...340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f9812811fdc23a9baa72f075afe566caddfe2280)

* Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1426](https://github.com/openshift/oc-mirror/pull/1426)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/994deebef2836ca75003dd15372f7110d2448fa6...f9812811fdc23a9baa72f075afe566caddfe2280)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/40d1c0adfedeca36498a5d93d69aee96831c756d)

* [OCPBUGS-80854](https://issues.redhat.com/browse/OCPBUGS-80854): bump google.golang.org/grpc to v1.79.3 to fix CVE-2026-33186 [#98](https://github.com/openshift/cloud-provider-powervs/pull/98)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/969a04e9dcb4cdde10e3038a9e28d2e27548918d...40d1c0adfedeca36498a5d93d69aee96831c756d)